Set up sharing boundaries for Google Drive with unified data protection rules

Wait 5 sec.

We’re introducing a new capability that allows Google Workspace administrators to configure audience sharing and sensitivity-based data conditions in a single, unified rule. This unified rule flow helps organizations elevate their security posture to proactively mitigate insider risks, prevent data exfiltration, and safely unblock collaboration for high-sensitivity environments.Previously, administrators managed user/group-based sharing controls with trust rules and data loss prevention (DLP) policies separately for Google Drive. With this launch, admins can now build granular, content-aware sharing boundaries that can evaluate data sensitivity (with classification labels or DLP conditions) and the audience with whom the data is being shared using trust rules criteria (such as organizational units, groups, or domains).New granular admin policies that prevent sharing between audiences based on data sensitivityAdditional detailsThe feature supports three audience restriction options:Block sharing with all external users: Prevents any file meeting the content criteria from being shared outside the organizationBlock all internal and external sharing, except with specific users (Allowlist): Restricts access to a curated list of trusted internal organizational units (OUs), groups, or external domainsBlock sharing with specific users (Denylist): Explicitly blocks sharing with specific internal organizational units, groups, or external parties (such as vendors or contractors) while permitting sharing with everyone else Getting startedAdmins: When configuring data protection rules in the Admin console, admins should select Google Drive as the app and the “block sharing” option to use this functionality. Visit the Help Center to learn more.End users: There is no end user setting for this feature.Rollout paceRapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on September 14, 2026AvailabilityEnterprise: Enterprise Standard and PlusEducation: Education Fundamentals, Standard, and PlusOther Editions: Enterprise Essentials; Frontline Standard and PlusResourcesGoogle Workspace Admin Help: Set up sharing boundaries in data protection rules